CVE-2026-98751

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

tty: abort break signalling on hangup

The break ioctls can race with hangup and end up calling into a tty

driver for a device that is already gone or powered down.

Drivers must handle this race, but TCSBRK and TCSBRKP should still be

aborted to avoid calling back into the driver after a user-controlled

timeout (possibly even after the tty has been reopened).

Note that drivers should disable any break state on shutdown so just

return on hangup (calling break_ctl() again is racy and will most likely

fail for drivers handling the race).

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References